Privacy Policy

1. Overview

Previu SpA, a company organized under the laws of Chile ("Previu", "we", "our", or "us"), operates the Previu mobile application and related public web properties. Previu is available only to users in the United States. This Privacy Policy explains what information we collect, how we use it, and the controls available to you.

Previu is designed to help you understand your money, not to sell your data. Our product and business model are subscription-based. We do not sell your personal information.

2. Information We Collect

Depending on how you use the service, we may collect the following categories of information:

• Account information: name, email address, authentication identifiers, and basic profile details.
• Financial information: account balances, transaction history, recurring payments, credit card statements and loan payment details (such as the minimum payment, interest rate and due date), and account metadata made available through connected providers such as Plaid.
• Usage information: product interactions, feature usage, app diagnostics, crash reports, and support history.
• Device information: device type, operating system, app version, coarse technical identifiers, and security-related signals needed to protect the service.
• TestFlight beta invitations: the invitation form sends your validated email to Apple only to invite you, together with the tester group that matches the link you came from (Instagram or Facebook, forums, or any other). Previu does not store the email or your iPhone, bank, credit card and matching answers. Your iPhone and bank answers decide whether we can invite you. The source of the invitation, your credit card and matching answers, whether your bank is Chase, and the result of the invitation in each tester group add to anonymous totals. A temporary HMAC of your IP limits abuse for one hour.
• Communications: messages you send to support, feedback, or security channels.
• Voice input: if you choose to dictate a message to Pax, the app records audio using your device microphone, with your permission. The recording is sent to our servers and to OpenAI to be transcribed. The transcribed text is returned to the app, where it is placed in the message field for you to review, and a copy of the transcription is kept on our servers for a short period so that a repeated request is not processed twice. If you send the text, it is treated like any other chat message.

3. How We Collect Information

We collect information directly from you, automatically when you use the app, and from third parties you choose to connect.

• Directly from you: when you create an account, configure budgets, set goals, or contact us.
• Automatically: when the app records operational logs, performance data, device characteristics, or security events.
• From connected services: when you link financial accounts or use supported third-party integrations.

4. How We Use Information

We use personal information only for legitimate product, security, legal, and operational purposes.

• Provide, maintain, and improve the service.
• Authenticate users and secure accounts.
• Sync financial data and calculate product features such as spending summaries, cash flow views, and recurring payments.
• Respond to support requests, bug reports, and account recovery issues.
• Detect abuse, fraud, suspicious activity, and platform misuse.
• Comply with legal obligations, enforce terms, and protect the rights of users and the company.

5. Third-Party Services and AI Features

Previu relies on third-party providers to operate key parts of the product. Those providers process data under their own terms and policies.

• Plaid: bank and financial account connectivity. To connect your bank we share an internal Previu user identifier with Plaid, and the merchant logos you see in the app load from addresses Plaid provides: your device downloads each logo directly from Plaid's logo host, which receives your IP address.
• Clerk: authentication and account security. Clerk manages your sign-in and sessions, and when you delete your account we ask Clerk to delete your sign-in account.
• RevenueCat: subscription and billing status. To link purchases to your account we share your Previu account identifier with RevenueCat, and when you delete your account we ask RevenueCat to delete that record.
• Sentry: crash reporting and minimized diagnostic telemetry, retained by the provider for up to 90 days. Reports include technical details, internal identifiers of bank connections, and an app installation identifier, but are not tagged with your Previu account. If we cannot confirm that a bank connection was revoked, the report includes the bank provider's name, an error or reason code, the number of attempts or the connection's position in the list, and internal Previu identifiers of the connection and its revocation, or of the account deletion.
• PostHog: product analytics, hosted in the United States. We share your Previu account identifier and usage events, such as the features you use, your app version, and the size and response time of AI replies. You can turn this off with the Usage Analytics switch in the app's privacy settings, and when you delete your account we ask PostHog to delete this data.
• Hosting: infrastructure that stores and processes the data described in this policy on our behalf, in the United States. Render runs our API, background processes, and cache; Supabase hosts our database.
• Expo: mobile infrastructure, app services, and push notification delivery. To deliver notifications we share your device's push token and the notification content, which can include your first name, merchant names, amounts, subscriptions, and spending categories with their percentages.
• Apple AdServices (iPhone): ad attribution. On iPhone, after you sign in, we send Apple the attribution token your device generates, over an encrypted connection and without your account identifier or name, to learn whether you came from an Apple Search Ads campaign; the app keeps only the campaign identifier.
• Apple TestFlight (iPhone): beta invitations. When you request an invitation on our testers page, we send Apple, through App Store Connect, your email and the tester group of the link you came from, only to invite you to TestFlight; Previu does not store the email.
• Amazon Web Services (AWS): key management and monitoring. AWS Key Management Service protects the keys that encrypt sensitive data we store, such as bank connection tokens: it receives those keys and an internal Previu user identifier that binds each key to your account, never the data the keys protect. AWS CloudWatch receives counts and response times of those operations, with no personal data.
• Talsec: device security checks in the app, such as whether the device has been modified (rooted or jailbroken) or the app has been tampered with, to protect your account. Talsec receives those security signals with technical device information, without your name, email, or Previu account identifier.
• OpenAI: AI-powered coaching experiences and transcription of voice input through OpenAI's transcription service when you actively use those features. With your AI permission, we also use OpenAI to categorize your bank transactions: for each transaction we send its description, merchant name and amount. For Pax's memory and to reuse answers to similar questions, we send OpenAI the text of your messages and of the notes Pax keeps about you to create embeddings (numeric representations of that text), which we store to recall relevant context later. Chat requests include a caching key computed by a one-way hash of Pax's instructions and the names of its tools; it is not derived from your account, name or email. Inputs and outputs sent through the stateless endpoints we use may be retained in provider abuse-monitoring logs for up to 30 days, unless zero-data-retention terms apply or longer retention is legally required.

6. When We Share Information

We share information only when necessary to operate the service, comply with the law, or protect users and the platform.

• Service providers: with vendors that help us provide infrastructure, authentication, subscriptions, analytics, and support.
• Legal and safety reasons: when required by law, subpoena, valid legal process, or to prevent fraud, abuse, or security incidents.
• Business transfers: in connection with a merger, acquisition, restructuring, or asset sale, subject to appropriate protections.
• Your direction: when you explicitly ask us to export, share, or connect data.

7. Security and Retention

We use layered technical and organizational controls to protect data. These include encryption in transit, encryption at rest for sensitive systems, access controls, logging, and operational monitoring.

We retain data only as long as required to provide the service, support users, investigate abuse, and comply with legal obligations. Some records may be retained after account deletion for fraud prevention, dispute handling, or statutory retention periods. Previu does not keep the email you enter to request a TestFlight invitation: we send it to Apple only to invite you, and from then on Apple's own terms and policies apply to it. The temporary HMAC of your IP expires within one hour.

Account deletion follows this timeline: access ends immediately and Previu stops reading your bank right away and asks Plaid to close the connection; your bank's app may still list Previu for a while; after a 30-day grace period, personal data is anonymized; anonymized financial records required for statutory obligations are retained for 7 years before final deletion. Deleting a Previu account does not cancel an App Store or Google Play subscription, which must be managed in the applicable store.

• TLS-protected data transmission.
• Role-based access controls and least-privilege access patterns.
• Monitoring for suspicious authentication, webhook, and infrastructure events.
• Documented incident response and data handling procedures.

8. Your Rights and Choices

You can manage many privacy controls directly in the app. Depending on your jurisdiction, you may also have legal rights regarding access, deletion, correction, or export.

• Access and update certain account details.
• Disconnect linked financial accounts.
• Delete your account and request deletion of associated data. Request account deletion without the app.
• Export available data when supported by the product.
• Opt out of non-essential communications.

9. California Privacy Rights

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, correct, and receive information about our data practices.

To exercise these rights, email team@getpreviu.com or use the in-app account deletion controls. We respond within the timelines required by law.

10. Children and International Transfers

Previu is not intended for children under 18, and we do not knowingly collect personal information from children.

Our providers and infrastructure may process data in the United States and other jurisdictions where we or our providers operate. By using the service, you understand that your information may be processed in those locations.

11. Changes and Contact

We may update this Privacy Policy to reflect product, legal, or operational changes. When the updates are material, we will revise the date above and provide notice when appropriate.

For privacy requests or questions, contact team@getpreviu.com. For general support, contact team@getpreviu.com.